CVSS: 4.3EPSS: 0%CPEs: 48EXPL: 0CVE-2013-5156
https://notcve.org/view.php?id=CVE-2013-5156
The Telephony subsystem in Apple iOS before 7 does not require API conformity for access to telephony-daemon interfaces, which allows attackers to bypass intended restrictions on phone calls via a crafted app that sends direct requests to the daemon. El subsistema Telephony en Apple iOS anterior a 7 no requiere conformidad del API para el acceso a las interfaces del demonio telefónico, el cual permite a los atacantes evitar restricciones establecidas sobre las llamadas telefónicas a través de una aplicación manipulada que envía peticiones directas al denomio. • http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html http://secunia.com/advisories/54886 http://support.apple.com/kb/HT5934 http://www.securitytracker.com/id/1029054 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.8EPSS: 0%CPEs: 48EXPL: 0CVE-2013-5140
https://notcve.org/view.php?id=CVE-2013-5140
The kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (assertion failure and device restart) via an invalid packet fragment. El núcleo de Apple iOS anterior a 7 permite a atacantes remotos provocar una denegación de servicio (fallo de aserción y reinicio del dispositivo) vía un fragmento de paquete no válidos. • http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html http://secunia.com/advisories/54886 http://support.apple.com/kb/HT5934 http://www.securitytracker.com/id/1029054 • CWE-20: Improper Input Validation •
CVSS: 4.3EPSS: 0%CPEs: 48EXPL: 0CVE-2013-5159
https://notcve.org/view.php?id=CVE-2013-5159
WebKit in Apple iOS before 7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive information about use of the window.webkitRequestAnimationFrame API via an IFRAME element. Vulnerabildad en WebKit para versiones Apple iOS anteriores a 7 permite a atacante remoto obtener información potencialmente sensible sobre el uso de la API window.webkitRequestAnimationFrame a través de un elemento IFRAME • http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html http://secunia.com/advisories/54886 http://support.apple.com/kb/HT5934 http://www.securitytracker.com/id/1029054 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.0EPSS: 0%CPEs: 48EXPL: 0CVE-2013-5157
https://notcve.org/view.php?id=CVE-2013-5157
The Twitter subsystem in Apple iOS before 7 does not require API conformity for access to Twitter daemon interfaces, which allows attackers to post Tweets via a crafted app that sends direct requests to the daemon. El subsistema de Twitter en Apple iOS anteriores a v7 no requiere conformidad de la API para acceder a las interfaces demonio de Twitter, lo cual permite a atacantes publicar Tweets a través de aplicaciones manipuladas que envían peticiones directas al demonio. • http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html http://secunia.com/advisories/54886 http://support.apple.com/kb/HT5934 http://www.securitytracker.com/id/1029054 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.8EPSS: 1%CPEs: 48EXPL: 0CVE-2013-1036
https://notcve.org/view.php?id=CVE-2013-1036
Safari in Apple iOS before 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document. Safari en Apple iOS (anterior a v7) permite a atacantes remotos ejecutar código arbitrariamente o causar una denegación de servicio (corrupción de memoria) a través de un documento XML manipulado. • http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.html http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html http://secunia.com/advisories/54886 http://support.apple.com/kb/HT5934 http://www.securitytracker.com/id/1029054 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •